better request.requires_https, thanks Yarin and Niphlod
This commit is contained in:
2
VERSION
2
VERSION
@@ -1 +1 @@
|
||||
Version 2.0.9 (2012-10-03 11:58:23) dev
|
||||
Version 2.0.9 (2012-10-03 12:32:01) dev
|
||||
|
||||
@@ -128,6 +128,7 @@ class Request(Storage):
|
||||
and secure the session.
|
||||
"""
|
||||
if not global_settings.cronjob and not self.is_https:
|
||||
session.forget()
|
||||
redirect(URL(scheme='https', args=self.args, vars=self.vars))
|
||||
|
||||
current.session.secure()
|
||||
|
||||
Reference in New Issue
Block a user